last executing test programs: 10.389173977s ago: executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) 10.348779749s ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000061401000000000000000000040022"], 0x18}}, 0x0) 10.211996133s ago: executing program 3: listen(0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000000000000050016003c00000008000b"], 0x2c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a181003f00000000000000000000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) 9.849023308s ago: executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'nicvf0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001580), 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001600), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 9.537496662s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0xa, @in=@loopback, 0x0, 0x4}, {{@in=@local, 0x0, 0x6c}, 0xa, @in, 0x0, 0x3}]}]}, 0x13c}}, 0x0) 9.40391133s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) sendfile(r2, r0, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r0, 0x6609, &(0x7f0000000000)) 2.01875516s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000480)='\x00\x00t', 0x3}, {&(0x7f0000000040)="1f47", 0x2}, {&(0x7f0000000300)="efce55", 0x3}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e43680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7b}, {&(0x7f0000000080)='R', 0x1}, {&(0x7f0000001840)}, {0x0}, {&(0x7f00000003c0)="5b78e0aebe5c7fcaa379a523d4e03fbd8fe08dcf3c4aa958162cb6c5a60144d269434daf4304ea11b118a427455c66a85391fc4c140b57ac8217d5bc368306cd00565c7c0a24f8ea3e46aa0e586bdcdbc36e99325f76843841fa", 0x5a}], 0x9) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1e6, 0xd4, 0x0, 0x600, r3, 0x0, '\x00', 0x0, r0, 0x5, 0x4, 0x0, 0x3}, 0x48) r5 = socket(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000440)="2246552879bf1dd53cc1a853ab86c19f1f", &(0x7f0000000040)=@udp=r5}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "81"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "032a08"}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000780)=""/5, 0x6d, 0x5, 0x1}, 0x20) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000240)=0x7038e0be, &(0x7f0000000280)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PRATE64={0xc}, @TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28}]}}]}, 0x74}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x225}], 0x1) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000640)) socket$phonet_pipe(0x23, 0x5, 0x2) 1.644562945s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @timestamp, @window={0x3, 0xfffe}], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.295622718s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 1.186535068s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x601, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x54}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 1.072447863s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000780)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/7, 0x7}, {0x0}, {0x0}], 0x5, &(0x7f0000000740)}, 0xa001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xfffffffd}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7}}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.005720405s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r7, &(0x7f0000000000)={0x10}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)={0x90, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x2, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 832.275802ms ago: executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f]}}, &(0x7f00000002c0)=""/25, 0x29, 0x19, 0x1, 0x8}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1d, '\x00', 0x0, 0x0, r0}, 0x90) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c20000000180c2000000080045437d45c1f5f1eef5019078ac1e0001ac1414aa0be09078120002282500eb00000000000000000000000000ac1e0001070022eb0a0ff500"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8927, &(0x7f0000000880)={'pim6reg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_MARK={0x8, 0x10, 0x2}]}, 0x2c}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x60, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r10}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xf0000000}}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_FLAGS={0x8, 0x8, 0x300}]}, 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf0, 0xfed3, 0x2, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x31000000}, 0x48) 785.314141ms ago: executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="00020000007063690011000200303030313a30303a31302e30000005a74ef74ec67fbc"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 718.046449ms ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x3}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) 676.780852ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000041000701000000000000000001"], 0x1c}}, 0x0) 665.824418ms ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x110, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="12b74c1aab4b", @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'syz_tun\x00', {}, {}, 0x0, 0xd2e8f9e2d662a487}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 570.813227ms ago: executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}]}}}}}}}, 0x0) 487.017909ms ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 478.109791ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x601, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x54}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 403.679692ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2008, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0xbc34}}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x37600000}]}]}, {0x0, [0x30]}}, &(0x7f0000000800)=""/7, 0x47, 0x7, 0x0, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x2, 0x0}, 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000003c0), 0xb315) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x0, 0x0, 0x0, 0x9a}]}, &(0x7f0000000740)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x29, r8, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x10, 0x4, 0x7}, 0x10, r9, r1, 0x6, &(0x7f0000000980)=[r10, r2, r0, r11], &(0x7f0000000a40)=[{0x0, 0x1, 0x6, 0x3}, {0x3, 0x4, 0xb, 0xa}, {0x5, 0x3, 0x3, 0x4}, {0x1, 0x3, 0xa, 0x5}, {0x3, 0x2, 0xb, 0x7}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x40}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x36a42183a72b7512, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0xc9, &(0x7f0000000380)=""/201, 0x41100, 0xed75a7fe2a97bdfd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, r0, r0, r0, r2, r3, r4, r0], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 387.573138ms ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x82, &(0x7f0000000000), &(0x7f0000000240)=0x4) 384.319353ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x28, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="27dc7fd9657120efc71aee335484e1726c6661c54536bf17090c886d271c0f353ffb2a5490f397d082c23cc61dc8067237ffe44e504477bb4539d85bb92cdf46aaca66aaa5751e596c4c0cfb1155360f152b3cda6ab2c8e1a8a1c106ee92947d3c579a90d397005408562e60c183ae708f08f2b821ac5945cbcb5fde92873fe7ec1bb1af32df19ea86c2d9b5ecb79b5a2e70096a97fcea3d23381b80b30428b1a40c6401df855e2ab0ef08785479966b410136a36625dd6f36f5ae152d43ecb1f97d9919d9fb6e6e3d614184bb932921cb005399030a0447385bd7cb51cc80", 0xdf}, {0x0}, {&(0x7f0000000440)="b0dde14d3f8a8a5b677195b69f7508dfa90e30db96d4722ec8073351a4999324f5770c626f39ac68039c1868c766466db602b8009994014fed55ed831bf6b8009c37eb3f", 0x44}, {0x0}, {&(0x7f0000000500)="57e22a5156caca0e773c0efd2857388e9a01406e8e28a582a21d6152f82d1cafea624eae1e3045c7fc3161", 0x2b}, {0x0}, {&(0x7f0000000600)="5563ca862c4c9ab8e1cd970906734029746936ecdf74d5963fc41f8419b147de5919acf3d5be077d7ae825dd303094511d66e29b082c26bb0dd2cfb0f7224209e3dd0ab2fb92eebe30087122155cdaf55b45c4ffb01227cbe9f418", 0x5b}], 0x7, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x57, 0x1, [{0x6, 0x5, "ceabd1"}, {0x0, 0x2}, {0x0, 0xf, "78484ef7591f8dfbdfcc36b0f5"}, {0x5, 0xd, "46c76eaa69a52e83afaac1"}, {0x6, 0x2}, {0x1, 0x10, "c8b7e9a6678023b5331ccebd719b"}, {0x1, 0x12, "324b5c0aaf8905d166a85c86b58a650a"}, {0x5, 0xa, "4cfa68fc5bc635e5"}]}, @lsrr={0x83, 0x1b, 0x9d, [@dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, @empty, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0xe}]}, @end, @noop, @rr={0x7, 0xf, 0x89, [@local, @loopback, @private=0xa010100]}]}}}], 0x120}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 340.563211ms ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="06136cbce82700a4d1f8", 0xa}, {&(0x7f0000000180)="3741a3336b3976", 0x7}], 0x2}, 0x0) 281.250194ms ago: executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @default, r2}) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdb0fcd9855b40357}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x140c, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r6, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000900)={0x1f, 0x2}, 0x6) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000940)="16339586cabd14edb85ee054abb54bcc008513072d97b952c07829e60ce773bf33ee6711e0a536c1ec07ba7c4310c9a6d6fb421e25f3be299bd0bae011", 0x3d, 0x8000, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f00000009c0)={0x1, [0x2]}, 0x6) 181.730213ms ago: executing program 4: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="00020000007063690011000200303030313a30303a31302e30000005a74ef74ec67fbc"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 149.42119ms ago: executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x398, 0xd8, 0x5002004a, 0x10030000, 0x0, 0xc203007a, 0x300, 0x3c8, 0x3c8, 0x300, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0xb8, 0xd8, 0x0, {0x0, 0x1200}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv6=@mcast1}], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 58.434183ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 45.91353ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x9, [@remote, @empty, @link_local, @link_local, @local, @random="726cc73b38e1", @link_local, @remote, @multicast]}) 0s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. 2024/05/31 01:58:25 fuzzer started 2024/05/31 01:58:25 dialing manager at 10.128.0.169:30018 [ 53.200687][ T5088] cgroup: Unknown subsys name 'net' [ 53.358015][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/05/31 01:58:26 starting 5 executor processes [ 54.453087][ T5091] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.247367][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.255251][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.277723][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.285535][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.303709][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.311677][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.314275][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.319580][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.326853][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.334091][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.342140][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.352222][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.362334][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.365244][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.370348][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.376669][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.384241][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.398348][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.398928][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.406140][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.413637][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.419918][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.426886][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.440436][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.448348][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.455503][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.456943][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.470938][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.474305][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.491266][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.872538][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 56.069541][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 56.108170][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.117275][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.124473][ T5109] bridge_slave_0: entered allmulticast mode [ 56.131636][ T5109] bridge_slave_0: entered promiscuous mode [ 56.179626][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.187075][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.194232][ T5109] bridge_slave_1: entered allmulticast mode [ 56.203283][ T5109] bridge_slave_1: entered promiscuous mode [ 56.233319][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 56.292836][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.305458][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.319425][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 56.328824][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 56.428580][ T5109] team0: Port device team_slave_0 added [ 56.466296][ T5109] team0: Port device team_slave_1 added [ 56.479954][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.487853][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.494958][ T5108] bridge_slave_0: entered allmulticast mode [ 56.502164][ T5108] bridge_slave_0: entered promiscuous mode [ 56.514456][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.521805][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.529062][ T5108] bridge_slave_1: entered allmulticast mode [ 56.535937][ T5108] bridge_slave_1: entered promiscuous mode [ 56.630735][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.641052][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.648215][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.674582][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.707919][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.715068][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.722235][ T5116] bridge_slave_0: entered allmulticast mode [ 56.729253][ T5116] bridge_slave_0: entered promiscuous mode [ 56.738590][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.745799][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.752939][ T5115] bridge_slave_0: entered allmulticast mode [ 56.760063][ T5115] bridge_slave_0: entered promiscuous mode [ 56.769033][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.776213][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.783349][ T5115] bridge_slave_1: entered allmulticast mode [ 56.790492][ T5115] bridge_slave_1: entered promiscuous mode [ 56.800182][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.809837][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.817341][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.844039][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.864098][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.871641][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.878997][ T5116] bridge_slave_1: entered allmulticast mode [ 56.885785][ T5116] bridge_slave_1: entered promiscuous mode [ 56.929342][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.936557][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.943686][ T5117] bridge_slave_0: entered allmulticast mode [ 56.951840][ T5117] bridge_slave_0: entered promiscuous mode [ 56.981909][ T5108] team0: Port device team_slave_0 added [ 56.991766][ T5108] team0: Port device team_slave_1 added [ 56.998220][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.005344][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.012776][ T5117] bridge_slave_1: entered allmulticast mode [ 57.020778][ T5117] bridge_slave_1: entered promiscuous mode [ 57.040911][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.052492][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.111009][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.122679][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.155327][ T5109] hsr_slave_0: entered promiscuous mode [ 57.161821][ T5109] hsr_slave_1: entered promiscuous mode [ 57.169657][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.177016][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.203103][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.261209][ T5115] team0: Port device team_slave_0 added [ 57.269372][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.278543][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.304805][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.323928][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.337495][ T5116] team0: Port device team_slave_0 added [ 57.345389][ T5115] team0: Port device team_slave_1 added [ 57.354574][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.383713][ T5116] team0: Port device team_slave_1 added [ 57.453471][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.460768][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.487486][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.487523][ T5114] Bluetooth: hci0: command tx timeout [ 57.507707][ T5117] team0: Port device team_slave_0 added [ 57.514209][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.521713][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.547781][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.564168][ T5113] Bluetooth: hci2: command tx timeout [ 57.569894][ T5110] Bluetooth: hci4: command tx timeout [ 57.569911][ T4489] Bluetooth: hci1: command tx timeout [ 57.575688][ T5114] Bluetooth: hci3: command tx timeout [ 57.614727][ T5117] team0: Port device team_slave_1 added [ 57.644514][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.651535][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.678020][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.691155][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.698290][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.726183][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.740822][ T5108] hsr_slave_0: entered promiscuous mode [ 57.747824][ T5108] hsr_slave_1: entered promiscuous mode [ 57.753903][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.761702][ T5108] Cannot create hsr debugfs directory [ 57.848142][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.855106][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.881344][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.898093][ T5115] hsr_slave_0: entered promiscuous mode [ 57.904242][ T5115] hsr_slave_1: entered promiscuous mode [ 57.910444][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.918195][ T5115] Cannot create hsr debugfs directory [ 57.948045][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.955008][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.981347][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.107836][ T5116] hsr_slave_0: entered promiscuous mode [ 58.114025][ T5116] hsr_slave_1: entered promiscuous mode [ 58.122949][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.131028][ T5116] Cannot create hsr debugfs directory [ 58.204526][ T5117] hsr_slave_0: entered promiscuous mode [ 58.210851][ T5117] hsr_slave_1: entered promiscuous mode [ 58.219212][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.226904][ T5117] Cannot create hsr debugfs directory [ 58.415168][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.426390][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.437628][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.455703][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.578789][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.593477][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.604135][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.632534][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.681448][ T5115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.694767][ T5115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.707940][ T5115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.717822][ T5115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.824196][ T5116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.864441][ T5116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.892041][ T5116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.904202][ T5116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.952015][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.965393][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.978457][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.990704][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.020835][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.045061][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.099280][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.106869][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.118167][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.125237][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.177765][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.279087][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.299865][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.347401][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.354502][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.368875][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.376058][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.413710][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.460870][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.468051][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.504730][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.545207][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.552355][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.566658][ T5114] Bluetooth: hci0: command tx timeout [ 59.603493][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.637186][ T5114] Bluetooth: hci1: command tx timeout [ 59.639288][ T4489] Bluetooth: hci3: command tx timeout [ 59.642604][ T5114] Bluetooth: hci2: command tx timeout [ 59.649098][ T4489] Bluetooth: hci4: command tx timeout [ 59.673843][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.694715][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.752250][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.759465][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.798080][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.825442][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.832615][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.883147][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.890302][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.903927][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.911192][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.984030][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.093803][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.152277][ T5109] veth0_vlan: entered promiscuous mode [ 60.219387][ T5109] veth1_vlan: entered promiscuous mode [ 60.288761][ T5108] veth0_vlan: entered promiscuous mode [ 60.335016][ T5108] veth1_vlan: entered promiscuous mode [ 60.383808][ T5109] veth0_macvtap: entered promiscuous mode [ 60.419241][ T5109] veth1_macvtap: entered promiscuous mode [ 60.450936][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.491155][ T5108] veth0_macvtap: entered promiscuous mode [ 60.517746][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.533193][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.543005][ T5108] veth1_macvtap: entered promiscuous mode [ 60.555487][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.579921][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.604512][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613613][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.623806][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.633345][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.691533][ T5115] veth0_vlan: entered promiscuous mode [ 60.700740][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.712337][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.724880][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.777051][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.788042][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.799663][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.849322][ T5116] veth0_vlan: entered promiscuous mode [ 60.863880][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.872882][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.881813][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.890592][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.905351][ T5115] veth1_vlan: entered promiscuous mode [ 60.939946][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.959870][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.969815][ T5116] veth1_vlan: entered promiscuous mode [ 60.994990][ T5117] veth0_vlan: entered promiscuous mode [ 61.039143][ T5165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.052279][ T5117] veth1_vlan: entered promiscuous mode [ 61.060882][ T5165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.103053][ T5116] veth0_macvtap: entered promiscuous mode [ 61.148248][ T5116] veth1_macvtap: entered promiscuous mode [ 61.166577][ T5115] veth0_macvtap: entered promiscuous mode [ 61.178885][ T5115] veth1_macvtap: entered promiscuous mode [ 61.198443][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.209652][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.222812][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.243545][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.259111][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.272127][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.291950][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.330938][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.347369][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.358348][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.370735][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.380969][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.391447][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.405179][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.415373][ T5117] veth0_macvtap: entered promiscuous mode [ 61.424806][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.436342][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.446534][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.458644][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.470384][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.492557][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.504708][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.517091][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.544124][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.555203][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.567279][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.579406][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.589816][ T5117] veth1_macvtap: entered promiscuous mode [ 61.610182][ T5115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.621857][ T5115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.635993][ T4489] Bluetooth: hci0: command tx timeout [ 61.642223][ T5115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.651027][ T5115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.669729][ T5116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.679973][ T5116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.689419][ T5116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.699312][ T5116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.716956][ T4489] Bluetooth: hci2: command tx timeout [ 61.721199][ T5114] Bluetooth: hci3: command tx timeout [ 61.722589][ T4489] Bluetooth: hci1: command tx timeout [ 61.728052][ T5110] Bluetooth: hci4: command tx timeout [ 61.747994][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.785485][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.803823][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.824804][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.834720][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.846795][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.856724][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.876051][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.888508][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.915663][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.928129][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.978236][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.006666][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.016612][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.032738][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.044212][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.054828][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.064806][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.076414][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.089104][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.127214][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.144494][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.165039][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.173954][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.293931][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.311388][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.437454][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.445303][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.455778][ T5122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.463614][ T5122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.552748][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.637769][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.659754][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.705789][ T5122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.727939][ T5122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.825035][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.833597][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.949797][ T5227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.585438][ T5251] Bluetooth: MGMT ver 1.22 [ 63.669276][ T29] audit: type=1804 audit(1717120716.013:2): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3019811089/syzkaller.pvE6DA/4/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 63.716519][ T5110] Bluetooth: hci0: command tx timeout [ 63.796708][ T5110] Bluetooth: hci4: command tx timeout [ 63.802401][ T5114] Bluetooth: hci3: command tx timeout [ 63.809131][ T5113] Bluetooth: hci1: command tx timeout [ 63.809145][ T4489] Bluetooth: hci2: command tx timeout [ 63.828183][ T5259] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.242439][ T5276] netlink: zone id is out of range [ 64.297236][ T5276] netlink: zone id is out of range [ 64.319841][ T5276] netlink: zone id is out of range [ 64.338487][ T5276] netlink: zone id is out of range [ 64.373325][ T5276] netlink: zone id is out of range [ 64.398244][ T5276] netlink: zone id is out of range [ 64.487493][ T5276] netlink: set zone limit has 4 unknown bytes [ 65.234531][ T5310] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.712950][ T5331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.736512][ T5331] No such timeout policy "syz0" [ 67.016592][ T5360] xt_connbytes: Forcing CT accounting to be enabled [ 67.032759][ T5360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.126039][ T5364] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 67.143847][ T5364] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.556950][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.736276][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.411902][ T5401] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.068067][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.565991][ T5470] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 71.215834][ T5499] À: renamed from syztnl0 [ 71.295955][ T5507] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 71.640886][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.647624][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.252115][ T5532] À: renamed from syztnl0 [ 73.079112][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.081387][ T5554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.111439][ T5554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.271541][ T5557] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 76.779455][ T45] cfg80211: failed to load regulatory.db [ 77.948629][ T5660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.050987][ T5660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.182112][ T5660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.286116][ T5660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.403058][ T5679] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.413882][ T5679] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.497794][ T5660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.525457][ T5660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.568112][ T5660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647216][ T5660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.941698][ T5697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.864571][ T5722] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 80.287816][ T5738] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 80.602493][ T5751] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 81.058824][ T5769] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.488529][ T5786] delete_channel: no stack [ 81.835750][ T5796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 81.843865][ T5796] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 81.879770][ T5796] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.977504][ T5798] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.158849][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.176650][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.184144][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.192478][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.202515][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.210387][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.287528][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.307226][ T5810] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.315731][ T5810] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.323972][ T5810] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.332357][ T5810] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.341329][ T5810] vxlan0: entered promiscuous mode [ 82.446455][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 82.513583][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.521230][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.528713][ T5802] bridge_slave_0: entered allmulticast mode [ 82.535541][ T5802] bridge_slave_0: entered promiscuous mode [ 82.544181][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.552000][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.559537][ T5802] bridge_slave_1: entered allmulticast mode [ 82.566772][ T5802] bridge_slave_1: entered promiscuous mode [ 82.599517][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.610892][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.644406][ T5802] team0: Port device team_slave_0 added [ 82.653640][ T5802] team0: Port device team_slave_1 added [ 82.687673][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.694638][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.722036][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.735450][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.744045][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.770401][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.815093][ T5802] hsr_slave_0: entered promiscuous mode [ 82.821501][ T5802] hsr_slave_1: entered promiscuous mode [ 82.829707][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.837730][ T5802] Cannot create hsr debugfs directory [ 82.956955][ T5802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.041438][ T5802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.110153][ T5819] Zero length message leads to an empty skb [ 83.158048][ T5802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.171842][ T5823] dccp_invalid_packet: P.Data Offset(48) too large [ 83.232984][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.411597][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.435878][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.448205][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.470892][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.504776][ T5837] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 83.514437][ T5838] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 83.658440][ T5844] dccp_invalid_packet: P.Data Offset(48) too large [ 83.668949][ T5842] syzkaller0: entered promiscuous mode [ 83.674995][ T5842] syzkaller0: entered allmulticast mode [ 83.731105][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.774060][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.807716][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.814847][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.840516][ T5850] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.855267][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.862440][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.094743][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.164922][ T5802] veth0_vlan: entered promiscuous mode [ 84.188928][ T5802] veth1_vlan: entered promiscuous mode [ 84.249005][ T5802] veth0_macvtap: entered promiscuous mode [ 84.265375][ T5802] veth1_macvtap: entered promiscuous mode [ 84.277024][ T5113] Bluetooth: hci0: command tx timeout [ 84.302742][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.313246][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.329810][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.341099][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.354514][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.370988][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.380872][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.395153][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.405236][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.418235][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.431575][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.467319][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.481684][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.500935][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.511712][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.523122][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.535980][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.547098][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.558145][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.585134][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.597177][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.608980][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.629636][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663917][ T5802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.672933][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.686837][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.792425][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.800410][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.844520][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.855218][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.293504][ T5900] tun0: tun_chr_ioctl cmd 35108 [ 85.565519][ T5913] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.586491][ T5913] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.605731][ T5913] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.615229][ T5913] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.849774][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.947243][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.280328][ T5958] pimreg: entered allmulticast mode [ 86.312369][ T5957] pimreg: left allmulticast mode [ 86.366408][ T5113] Bluetooth: hci0: command tx timeout [ 86.542041][ T5967] tun0: tun_chr_ioctl cmd 35108 [ 86.747295][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.824857][ T5987] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 86.836550][ T5987] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 86.934591][ T5992] ipvlan0: entered promiscuous mode [ 86.940879][ T5991] ipvlan0: left promiscuous mode [ 87.252863][ T6016] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.271049][ T6018] syz-executor.2[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.271293][ T6018] syz-executor.2[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.293743][ T6017] hsr_slave_0: left promiscuous mode [ 87.330392][ T6017] hsr_slave_1: left promiscuous mode [ 87.835129][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.844006][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.854172][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.866017][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.874941][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.883605][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.950661][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.971512][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.048576][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.058519][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.085889][ T6041] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 88.094177][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.109711][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.121141][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.158721][ T6044] syz-executor.2[6044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.158946][ T6044] syz-executor.2[6044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.199696][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.225710][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.379730][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.389673][ T6052] team0: Port device batadv0 added [ 88.428670][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 88.435947][ T5113] Bluetooth: hci0: command tx timeout [ 88.448387][ T12] bridge_slave_1: left allmulticast mode [ 88.454215][ T12] bridge_slave_1: left promiscuous mode [ 88.470702][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.491802][ T12] bridge_slave_0: left allmulticast mode [ 88.502689][ T12] bridge_slave_0: left promiscuous mode [ 88.509072][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.881426][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.893310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.911867][ T12] bond0 (unregistering): Released all slaves [ 88.990371][ T6059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.052359][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.124917][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.145896][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.153114][ T6033] bridge_slave_0: entered allmulticast mode [ 89.177207][ T6033] bridge_slave_0: entered promiscuous mode [ 89.205916][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.213228][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.222820][ T6033] bridge_slave_1: entered allmulticast mode [ 89.239235][ T6033] bridge_slave_1: entered promiscuous mode [ 89.291210][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.306366][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.613765][ T6033] team0: Port device team_slave_0 added [ 89.639489][ T6033] team0: Port device team_slave_1 added [ 89.784298][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.793630][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.805528][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.827039][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.836397][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.843356][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.872288][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.885411][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.892498][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.918890][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.929773][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.934204][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.955814][ T5114] Bluetooth: hci4: command tx timeout [ 90.052641][ T12] hsr_slave_0: left promiscuous mode [ 90.064902][ T12] hsr_slave_1: left promiscuous mode [ 90.071966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.087704][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.105108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.120559][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.140927][ T12] veth1_macvtap: left promiscuous mode [ 90.147617][ T12] veth0_macvtap: left promiscuous mode [ 90.153995][ T12] veth1_vlan: left promiscuous mode [ 90.160047][ T12] veth0_vlan: left promiscuous mode [ 90.519823][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.558195][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.858744][ T6033] hsr_slave_0: entered promiscuous mode [ 90.865094][ T6033] hsr_slave_1: entered promiscuous mode [ 90.874618][ T6033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.885944][ T6033] Cannot create hsr debugfs directory [ 91.044587][ T6090] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 91.291700][ T6077] chnl_net:caif_netlink_parms(): no params data found [ 91.464342][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.472515][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.489585][ T6077] bridge_slave_0: entered allmulticast mode [ 91.498948][ T6077] bridge_slave_0: entered promiscuous mode [ 91.517759][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.524850][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.540748][ T6077] bridge_slave_1: entered allmulticast mode [ 91.560828][ T6077] bridge_slave_1: entered promiscuous mode [ 91.564308][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.600677][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.679144][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.721493][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.743922][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.824920][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.842686][ T6077] team0: Port device team_slave_0 added [ 91.862357][ T6077] team0: Port device team_slave_1 added [ 91.901893][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.985401][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.992589][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.019593][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.034486][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.038343][ T5114] Bluetooth: hci4: command tx timeout [ 92.042485][ T5113] Bluetooth: hci0: command tx timeout [ 92.064270][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.095815][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.131987][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.153859][ T6033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.167453][ T6033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.179546][ T6033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.203648][ T6033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.284669][ T6077] hsr_slave_0: entered promiscuous mode [ 92.291427][ T6077] hsr_slave_1: entered promiscuous mode [ 92.298114][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.311409][ T6077] Cannot create hsr debugfs directory [ 92.364646][ T12] bridge_slave_1: left allmulticast mode [ 92.380971][ T12] bridge_slave_1: left promiscuous mode [ 92.387831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.403823][ T12] bridge_slave_0: left allmulticast mode [ 92.411956][ T12] bridge_slave_0: left promiscuous mode [ 92.434342][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.727184][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.738677][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.751648][ T12] bond0 (unregistering): Released all slaves [ 93.092184][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.134412][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.142656][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.162275][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.170860][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.192166][ T12] veth1_macvtap: left promiscuous mode [ 93.197716][ T12] veth0_macvtap: left promiscuous mode [ 93.203257][ T12] veth1_vlan: left promiscuous mode [ 93.208642][ T12] veth0_vlan: left promiscuous mode [ 93.558463][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.588305][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.894310][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.947824][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.994093][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.001280][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.063658][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.070817][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.116478][ T5113] Bluetooth: hci4: command tx timeout [ 94.118664][ T6140] Bluetooth: MGMT ver 1.22 [ 94.126786][ T5113] Bluetooth: hci0: command tx timeout [ 94.167434][ T6077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.211754][ T6077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.234201][ T6077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.265979][ T6077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.317855][ T6033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.433843][ T6148] tun0: tun_chr_ioctl cmd 1074025677 [ 94.440878][ T6148] tun0: linktype set to 778 [ 94.564673][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.618291][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.641953][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.649149][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.699710][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.706881][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.720657][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.730804][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.755380][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.763227][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.780692][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.792562][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.800137][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.904186][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.943848][ T6033] veth0_vlan: entered promiscuous mode [ 95.022353][ T6033] veth1_vlan: entered promiscuous mode [ 95.146692][ T6033] veth0_macvtap: entered promiscuous mode [ 95.250864][ T6033] veth1_macvtap: entered promiscuous mode [ 95.304498][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.339327][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.351236][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.371886][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.387050][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.401851][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.413724][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.424395][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.437297][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.450007][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.483129][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 95.523808][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.555609][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.565437][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.585628][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.595454][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.615702][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.635666][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.653056][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.664247][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.675463][ T6033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.690899][ T6033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.699672][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.709687][ T6033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.807161][ T6170] syzkaller0: entered promiscuous mode [ 95.812667][ T6170] syzkaller0: entered allmulticast mode [ 96.196412][ T5113] Bluetooth: hci4: command tx timeout [ 96.201904][ T5114] Bluetooth: hci0: command tx timeout [ 96.267533][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.288632][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.308750][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.329996][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.343353][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.355099][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.839526][ T5114] Bluetooth: hci5: command tx timeout [ 97.148219][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.161402][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.175787][ T6157] bridge_slave_0: entered allmulticast mode [ 97.182552][ T6157] bridge_slave_0: entered promiscuous mode [ 97.206908][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.214043][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.226650][ T6157] bridge_slave_1: entered allmulticast mode [ 97.232087][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.233921][ T6157] bridge_slave_1: entered promiscuous mode [ 97.253982][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.319049][ T6180] syzkaller1: entered promiscuous mode [ 97.325525][ T6180] syzkaller1: entered allmulticast mode [ 97.350066][ T6077] veth0_vlan: entered promiscuous mode [ 97.364332][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.377099][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.471076][ T6157] team0: Port device team_slave_0 added [ 97.510464][ T6077] veth1_vlan: entered promiscuous mode [ 97.520646][ T6157] team0: Port device team_slave_1 added [ 97.530803][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.540399][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.599613][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.608572][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.652586][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.677754][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.715210][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.729997][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.759982][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.909986][ T6157] hsr_slave_0: entered promiscuous mode [ 97.922065][ T6157] hsr_slave_1: entered promiscuous mode [ 97.928568][ T6157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.943719][ T6157] Cannot create hsr debugfs directory [ 98.019102][ T6201] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 98.113770][ T6077] veth0_macvtap: entered promiscuous mode [ 98.179769][ T6203] dummy0: entered promiscuous mode [ 98.185281][ T6203] macsec1: entered promiscuous mode [ 98.200008][ T6203] macsec1: entered allmulticast mode [ 98.205366][ T6203] dummy0: entered allmulticast mode [ 98.275909][ T5114] Bluetooth: hci0: command tx timeout [ 98.287314][ T6077] veth1_macvtap: entered promiscuous mode [ 98.349185][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.361369][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.394326][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.411709][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.430304][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.441591][ T5114] Bluetooth: hci6: command tx timeout [ 98.460144][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.470292][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.480924][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.490817][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.502402][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.514020][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.540105][ T6219] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.551498][ T6219] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.563670][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 98.732383][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.743727][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.766596][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.777395][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.787380][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.800227][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.811123][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.822021][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.833596][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.845811][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.859457][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.904986][ T6225] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.914367][ T6225] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.923487][ T6225] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.926031][ T5114] Bluetooth: hci5: command tx timeout [ 98.932224][ T6225] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.061137][ T6157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.093519][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.154033][ T6077] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.168086][ T6077] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.182347][ T6077] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.202217][ T6077] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.264372][ T6157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.363572][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.372510][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.380564][ T6174] bridge_slave_0: entered allmulticast mode [ 99.395034][ T6174] bridge_slave_0: entered promiscuous mode [ 99.444351][ T6157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.464162][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.472935][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.482086][ T6174] bridge_slave_1: entered allmulticast mode [ 99.490138][ T6174] bridge_slave_1: entered promiscuous mode [ 99.564678][ T6157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.607655][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.654733][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.748179][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.771157][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.805839][ T6174] team0: Port device team_slave_0 added [ 99.866015][ T6174] team0: Port device team_slave_1 added [ 99.927581][ T6258] batadv_slave_1: entered promiscuous mode [ 99.948138][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.960827][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.992568][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.999712][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.025845][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.041224][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.056078][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.096305][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.110699][ T6157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.123552][ T6157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.148322][ T6257] batadv_slave_1: left promiscuous mode [ 100.158792][ T6157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.284422][ T6157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.311275][ T6174] hsr_slave_0: entered promiscuous mode [ 100.328269][ T6174] hsr_slave_1: entered promiscuous mode [ 100.334876][ T6174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.346157][ T6174] Cannot create hsr debugfs directory [ 100.516348][ T5114] Bluetooth: hci6: command tx timeout [ 100.549953][ T6270] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 100.742274][ T6174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.794166][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.879355][ T6174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.903948][ T6284] batadv_slave_1: entered promiscuous mode [ 100.996721][ T5114] Bluetooth: hci5: command tx timeout [ 101.035345][ T6174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.098888][ T6283] batadv_slave_1: left promiscuous mode [ 101.173139][ T6174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.214929][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.434604][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.444639][ T6301] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 101.500500][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.507712][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.544219][ T6304] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 101.568499][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.575699][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.623139][ T6174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.655388][ T6174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.702455][ T6174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.739211][ T6174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.097797][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.178973][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.213394][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.220575][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.260354][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.267528][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.333220][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.400302][ T6335] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 102.440348][ T6335] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 102.473635][ T6335] syz-executor.3 (6335) used greatest stack depth: 18992 bytes left [ 102.578338][ T6157] veth0_vlan: entered promiscuous mode [ 102.595839][ T5114] Bluetooth: hci6: command tx timeout [ 102.609924][ T6157] veth1_vlan: entered promiscuous mode [ 102.734424][ T6157] veth0_macvtap: entered promiscuous mode [ 102.764324][ T6157] veth1_macvtap: entered promiscuous mode [ 102.828751][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.858657][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.875764][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.896578][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.910714][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.928425][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.938449][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.949195][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.976013][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.989683][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.000355][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.019764][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.031772][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.077610][ T5114] Bluetooth: hci5: command tx timeout [ 103.102472][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.151854][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.181333][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.214018][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.249925][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.293424][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.322055][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.353801][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.383785][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.405673][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.425705][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.435544][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.455607][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.481748][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.516912][ T6157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530383][ T6157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.556025][ T6157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.564735][ T6157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.838055][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.870314][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.021309][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.060517][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.275326][ T6174] veth0_vlan: entered promiscuous mode [ 104.340331][ T6174] veth1_vlan: entered promiscuous mode [ 104.485189][ T6174] veth0_macvtap: entered promiscuous mode [ 104.485211][ T6399] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.516768][ T6399] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.536867][ T6174] veth1_macvtap: entered promiscuous mode [ 104.552159][ T6401] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 104.562621][ T6396] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.582863][ T6401] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 104.584451][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.622993][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.654264][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.676184][ T5114] Bluetooth: hci6: command tx timeout [ 104.683972][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.720632][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.735491][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.746855][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.768706][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.801983][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.823035][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.848142][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.867994][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.883761][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.902994][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.931647][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.003473][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.035855][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.057590][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.071118][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.100996][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.127728][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.141503][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.152293][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.173497][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.184242][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.200935][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.222681][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.232551][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.248109][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.268545][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.358897][ T6421] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 105.403537][ T6421] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.462449][ T6174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.471452][ T6174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.481248][ T6174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.528425][ T6174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.634618][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.685511][ T6436] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.722769][ T6435] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 105.750879][ T6436] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.793250][ T6433] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.823883][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.848452][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.966303][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.987904][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.439735][ T6472] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.482006][ T6472] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.555661][ T6470] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.016114][ T6498] xt_CT: No such helper "snmp_trap" [ 107.455780][ T6523] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 107.866142][ T6546] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 107.890597][ T6546] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 107.914584][ T6546] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 108.768848][ T6520] syz-executor.4 (6520) used greatest stack depth: 18352 bytes left [ 110.157593][ T6673] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.318076][ T6680] sctp: [Deprecated]: syz-executor.1 (pid 6680) Use of int in max_burst socket option deprecated. [ 110.318076][ T6680] Use struct sctp_assoc_value instead [ 110.557043][ T6703] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 110.584092][ T6703] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 110.622864][ T6703] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 111.579990][ T6752] __nla_validate_parse: 2 callbacks suppressed [ 111.580009][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.414026][ T6777] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.046593][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.053246][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.059750][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.066144][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.072671][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.079093][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.085523][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.091911][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.098393][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.104771][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.370664][ T6797] xt_nfacct: accounting object `syz1' does not exists [ 114.902957][ T6812] ieee802154 phy0 wpan0: encryption failed: -90 [ 115.239826][ T6775] bond0: entered promiscuous mode [ 115.256147][ T6775] bond_slave_0: entered promiscuous mode [ 115.262843][ T6775] bond_slave_1: entered promiscuous mode [ 115.274900][ T6775] bond0: left promiscuous mode [ 115.287994][ T6775] bond_slave_0: left promiscuous mode [ 115.295221][ T6775] bond_slave_1: left promiscuous mode [ 115.301814][ T6818] syz-executor.3[6818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.302042][ T6818] syz-executor.3[6818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.545763][ T6826] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 115.968412][ T29] audit: type=1804 audit(1717120768.313:3): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3999239841/syzkaller.rZr3y4/27/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 116.187468][ T6860] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.323523][ T6867] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 116.652128][ T6891] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 116.678783][ T6891] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 116.690966][ T6891] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 116.856961][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.941359][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.976102][ T6909] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 116.997561][ T6909] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 117.021890][ T6909] vxlan1: entered promiscuous mode [ 117.266294][ T6926] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 117.288110][ T6926] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 117.337869][ T6928] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.827405][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.856315][ T7030] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 118.873653][ T7030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.882575][ T7030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.891509][ T7030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.900266][ T7030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.958765][ T7030] vxlan0: entered promiscuous mode [ 118.990531][ T7035] netlink: 'syz-executor.1': attribute type 298 has an invalid length. [ 119.069628][ T7040] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 119.105204][ T7040] batman_adv: batadv0: Adding interface: wlan0 [ 119.112118][ T7040] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.168466][ T7040] batman_adv: batadv0: Interface activated: wlan0 [ 119.465844][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.857304][ T7081] nbd: must specify an index to disconnect [ 119.910124][ T7089] tipc: Failed to remove unknown binding: 66,1,1/0:4157959324/4157959326 [ 119.931609][ T7089] tipc: Failed to remove unknown binding: 66,1,1/0:4157959324/4157959326 [ 119.956975][ T7089] tipc: Failed to remove unknown binding: 66,1,1/0:4157959324/4157959326 [ 120.090488][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.199447][ T7106] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.449854][ T7118] nbd: must specify an index to disconnect [ 120.923967][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.043495][ T7150] ip6t_srh: unknown srh invflags 4000 [ 121.056641][ T7151] nbd: must specify an index to disconnect [ 121.237895][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.276692][ T7158] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.029482][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.099620][ T7198] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.508746][ T7220] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 122.544288][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.569324][ T7226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.579802][ T7220] bridge0: port 3(syz_tun) entered blocking state [ 122.612958][ T7220] bridge0: port 3(syz_tun) entered disabled state [ 122.633664][ T7220] syz_tun: entered allmulticast mode [ 122.641156][ T7220] syz_tun: entered promiscuous mode [ 122.647265][ T7220] bridge0: port 3(syz_tun) entered blocking state [ 122.654304][ T7220] bridge0: port 3(syz_tun) entered forwarding state [ 122.902966][ T7244] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.930353][ T7244] unsupported nlmsg_type 40 [ 123.583613][ T7276] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.631806][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.661868][ T7278] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 123.662539][ T7281] net_ratelimit: 47 callbacks suppressed [ 123.662554][ T7281] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSR]L3 index 0 [ 123.679866][ T7278] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.693018][ T7278] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.701792][ T7278] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.710769][ T7278] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.900658][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.968918][ T7294] team0: Port device bridge1 added [ 124.124009][ T7304] gretap0: entered promiscuous mode [ 124.954419][ T7348] xt_TCPMSS: Only works on TCP SYN packets [ 125.688155][ T7392] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 125.742064][ T7392] veth1_macvtap: left promiscuous mode [ 125.747885][ T7392] macsec0: entered allmulticast mode [ 125.786120][ T7392] veth1_macvtap: entered promiscuous mode [ 125.824168][ T7392] veth1_macvtap: entered allmulticast mode [ 126.383124][ T7431] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 126.417762][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.689056][ T7439] bridge0: port 3(hsr0) entered blocking state [ 126.715448][ T7439] bridge0: port 3(hsr0) entered disabled state [ 126.744928][ T7439] hsr0: entered allmulticast mode [ 126.763140][ T7439] hsr_slave_0: entered allmulticast mode [ 126.781130][ T7439] hsr_slave_1: entered allmulticast mode [ 126.800693][ T7439] hsr0: entered promiscuous mode [ 126.819625][ T7439] bridge0: port 3(hsr0) entered blocking state [ 126.825987][ T7439] bridge0: port 3(hsr0) entered forwarding state [ 127.099794][ T7459] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.458931][ T7479] bridge0: port 3(hsr0) entered blocking state [ 127.481073][ T7479] bridge0: port 3(hsr0) entered disabled state [ 127.500688][ T7479] hsr0: entered allmulticast mode [ 127.513397][ T7479] hsr_slave_0: entered allmulticast mode [ 127.531746][ T7479] hsr_slave_1: entered allmulticast mode [ 127.544982][ T7479] hsr0: entered promiscuous mode [ 127.551835][ T7479] bridge0: port 3(hsr0) entered blocking state [ 127.558169][ T7479] bridge0: port 3(hsr0) entered forwarding state [ 127.617810][ T7487] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 127.662583][ T7487] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 127.791937][ T7498] pim6reg: entered allmulticast mode [ 127.812512][ T7498] pim6reg: left allmulticast mode [ 128.186769][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.244692][ T7528] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 128.274869][ T7528] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 128.381613][ T7535] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 128.477927][ T7539] x_tables: duplicate underflow at hook 3 [ 128.698896][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.833126][ T7564] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 128.999532][ T7573] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 129.031985][ T29] audit: type=1804 audit(1717120781.373:4): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir20678868/syzkaller.XLn6hH/298/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 129.110608][ T7580] mac80211_hwsim hwsim19 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 129.311711][ T7588] hsr0: entered promiscuous mode [ 129.341237][ T7588] macsec1: entered promiscuous mode [ 129.380006][ T7596] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 130.044026][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.088297][ T7625] unsupported nla_type 768 [ 130.268036][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.307751][ T7635] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.756960][ T7653] pim6reg1: entered promiscuous mode [ 130.762299][ T7653] pim6reg1: entered allmulticast mode [ 131.317315][ T7680] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.859812][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.177551][ T7715] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.348256][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.563658][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.639333][ T7733] dummy0: entered promiscuous mode [ 133.079892][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.088249][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159850][ T7753] pim6reg: entered allmulticast mode [ 133.182483][ T7753] pim6reg: left allmulticast mode [ 133.224405][ T7755] __nla_validate_parse: 1 callbacks suppressed [ 133.224422][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.242977][ T7757] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 134.516094][ T5114] Bluetooth: hci6: command tx timeout [ 134.569488][ T7810] IPv6: addrconf: prefix option has invalid lifetime [ 134.827119][ T7821] Bluetooth: MGMT ver 1.22 [ 134.901421][ T7824] pim6reg: entered allmulticast mode [ 134.957719][ T7830] pim6reg: entered allmulticast mode [ 134.987036][ T7830] pim6reg: left allmulticast mode [ 135.049756][ T7834] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 135.057892][ T7836] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 135.091748][ T7824] pim6reg: left allmulticast mode [ 135.398572][ T7846] IPv6: addrconf: prefix option has invalid lifetime [ 135.519905][ T7856] team_slave_0: entered promiscuous mode [ 135.525964][ T7856] team_slave_1: entered promiscuous mode [ 135.531781][ T7856] bridge1: entered promiscuous mode [ 135.551829][ T7856] macvlan2: entered allmulticast mode [ 135.584886][ T7856] team0: entered allmulticast mode [ 135.612019][ T7856] team_slave_0: entered allmulticast mode [ 135.645958][ T7856] team_slave_1: entered allmulticast mode [ 135.673483][ T7856] bridge1: entered allmulticast mode [ 135.688181][ T12] tipc: Subscription rejected, illegal request [ 135.706118][ T7856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.964905][ T7884] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.148862][ T7894] IPv6: addrconf: prefix option has invalid lifetime [ 136.263052][ T7898] tls_set_device_offload_rx: netdev not found [ 136.349008][ T7901] macvlan3: entered allmulticast mode [ 136.359092][ T7901] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 136.985209][ T7933] IPv6: addrconf: prefix option has invalid lifetime [ 137.656629][ T7921] syz-executor.3 (7921) used greatest stack depth: 18000 bytes left [ 137.683307][ T7956] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.706645][ T7956] netlink: 1528 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.301379][ T7984] tls_set_device_offload_rx: netdev not found [ 138.518586][ T7996] batadv_slave_0: entered allmulticast mode [ 138.539365][ T7996] batadv_slave_0: left allmulticast mode [ 138.826101][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.871223][ T8013] team_slave_0: entered promiscuous mode [ 138.877231][ T8013] team_slave_1: entered promiscuous mode [ 138.882927][ T8013] batadv0: entered promiscuous mode [ 138.925244][ T8013] macvtap1: entered promiscuous mode [ 138.945868][ T8013] team0: entered promiscuous mode [ 138.966582][ T8013] macvtap1: entered allmulticast mode [ 138.972502][ T8013] team0: entered allmulticast mode [ 139.006036][ T8013] team_slave_0: entered allmulticast mode [ 139.028289][ T8024] tls_set_device_offload_rx: netdev not found [ 139.028303][ T8013] team_slave_1: entered allmulticast mode [ 139.059716][ T8013] batadv0: entered allmulticast mode [ 139.071671][ T8013] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 139.103626][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.144949][ T8017] macvtap1: entered promiscuous mode [ 139.155175][ T8017] team0: entered promiscuous mode [ 139.167255][ T8017] team_slave_0: entered promiscuous mode [ 139.180546][ T8017] team_slave_1: entered promiscuous mode [ 139.192603][ T8017] macvtap1: entered allmulticast mode [ 139.201686][ T8017] team0: entered allmulticast mode [ 139.214057][ T8017] team_slave_0: entered allmulticast mode [ 139.223354][ T8017] team_slave_1: entered allmulticast mode [ 139.239517][ T8017] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 139.258049][ T8027] netem: unknown loss type 0 [ 139.265423][ T8027] netem: change failed [ 139.983341][ T8058] syz-executor.3 uses old SIOCAX25GETINFO [ 140.295835][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.335888][ T8081] macvtap2: entered promiscuous mode [ 140.343147][ T8081] macvtap2: entered allmulticast mode [ 140.356491][ T8081] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 140.368263][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.418004][ T8082] team_slave_0: entered promiscuous mode [ 140.423774][ T8082] team_slave_1: entered promiscuous mode [ 140.448645][ T8082] macvtap1: entered promiscuous mode [ 140.467384][ T8082] team0: entered promiscuous mode [ 140.483113][ T8082] macvtap1: entered allmulticast mode [ 140.492942][ T8082] team0: entered allmulticast mode [ 140.498638][ T8082] team_slave_0: entered allmulticast mode [ 140.504705][ T8082] team_slave_1: entered allmulticast mode [ 140.521344][ T8082] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 141.344652][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 141.398062][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 141.429442][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 141.882672][ T5122] vcan0 speed is unknown, defaulting to 1000 [ 141.890544][ T8135] infiniband syz1: set active [ 141.916355][ T8135] infiniband syz1: added vcan0 [ 142.175101][ T8135] RDS/IB: syz1: added [ 142.198333][ T8135] smc: adding ib device syz1 with port count 1 [ 142.218626][ T8135] smc: ib device syz1 port 1 has pnetid [ 142.236083][ T5159] vcan0 speed is unknown, defaulting to 1000 [ 142.309285][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 142.630043][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.752764][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.797981][ T8201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.805620][ T8201] IPv6: NLM_F_CREATE should be set when creating new route [ 142.812849][ T8201] IPv6: NLM_F_CREATE should be set when creating new route [ 142.876182][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 143.318990][ T8224] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 143.442744][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 143.548422][ T8236] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 143.581679][ T8236] veth0_macvtap: left promiscuous mode [ 143.988248][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.030978][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 144.044989][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.052225][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.346122][ T29] audit: type=1800 audit(1717120796.683:5): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 144.434648][ T29] audit: type=1804 audit(1717120796.773:6): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3520179928/syzkaller.qUvdga/182/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 144.496935][ T29] audit: type=1804 audit(1717120796.773:7): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3520179928/syzkaller.qUvdga/182/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 144.707550][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 144.898653][ T8300] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.139771][ T8313] xt_SECMARK: invalid mode: 0 [ 145.196996][ T8315] vcan0: entered allmulticast mode [ 145.235823][ T8315] vcan0: left allmulticast mode [ 145.276904][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 145.843943][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.853942][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.863578][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.871886][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.888412][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.904710][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.910264][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 146.472011][ T1027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.496585][ T1027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.564125][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.584031][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.591289][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.653258][ T8333] vcan0 speed is unknown, defaulting to 1000 [ 146.665647][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.720235][ T1027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.744079][ T1027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.010781][ T1027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.040253][ T1027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.142546][ T8135] vcan0 speed is unknown, defaulting to 1000 [ 147.183582][ T1027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.219014][ T1027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.363071][ T8393] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 147.426188][ T8393] veth0_macvtap: left promiscuous mode [ 147.692253][ T8405] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 147.735726][ T8405] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.767442][ T1027] hsr0: left allmulticast mode [ 147.787451][ T1027] hsr_slave_0: left allmulticast mode [ 147.808815][ T1027] hsr_slave_1: left allmulticast mode [ 147.825796][ T1027] hsr0: left promiscuous mode [ 147.833423][ T1027] bridge0: port 3(hsr0) entered disabled state [ 147.884234][ T1027] bridge_slave_1: left allmulticast mode [ 147.898175][ T1027] bridge_slave_1: left promiscuous mode [ 147.912933][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.939989][ T1027] bridge_slave_0: left allmulticast mode [ 147.946290][ T1027] bridge_slave_0: left promiscuous mode [ 147.955868][ T5114] Bluetooth: hci7: command tx timeout [ 147.980574][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.811968][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.844044][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.867670][ T1027] bond0 (unregistering): Released all slaves [ 149.098138][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 149.235466][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.430899][ T1027] batman_adv: batadv0: Interface deactivated: wlan0 [ 149.564484][ T1027] batman_adv: batadv0: Removing interface: wlan0 [ 149.832682][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.874674][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.895155][ T8333] bridge_slave_0: entered allmulticast mode [ 149.957483][ T8333] bridge_slave_0: entered promiscuous mode [ 149.999416][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.034695][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.045294][ T5114] Bluetooth: hci7: command tx timeout [ 150.077981][ T8333] bridge_slave_1: entered allmulticast mode [ 150.137492][ T8333] bridge_slave_1: entered promiscuous mode [ 150.290145][ T1027] hsr_slave_0: left promiscuous mode [ 150.306313][ T1027] hsr_slave_1: left promiscuous mode [ 150.319413][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.342201][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.357155][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.368674][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.407032][ T1027] team0: left allmulticast mode [ 150.411921][ T1027] team_slave_0: left allmulticast mode [ 150.422625][ T1027] team_slave_1: left allmulticast mode [ 150.429821][ T1027] team0: left promiscuous mode [ 150.434741][ T1027] team_slave_0: left promiscuous mode [ 150.443593][ T1027] team_slave_1: left promiscuous mode [ 150.459912][ T1027] dummy0: left allmulticast mode [ 150.474727][ T1027] dummy0: left promiscuous mode [ 150.488830][ T1027] veth1_macvtap: left promiscuous mode [ 150.501243][ T1027] veth1_vlan: left promiscuous mode [ 150.512184][ T1027] veth0_vlan: left promiscuous mode [ 150.986955][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 151.022946][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 151.407927][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.420643][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.534251][ T8333] team0: Port device team_slave_0 added [ 151.578586][ T8333] team0: Port device team_slave_1 added [ 151.691478][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.736036][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.805694][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.828509][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.835494][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.863279][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.013672][ T8333] hsr_slave_0: entered promiscuous mode [ 152.045983][ T8333] hsr_slave_1: entered promiscuous mode [ 152.061574][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.083634][ T8333] Cannot create hsr debugfs directory [ 152.115696][ T5114] Bluetooth: hci7: command tx timeout [ 152.652022][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.836968][ T8333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.860239][ T8333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.887696][ T8333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.927215][ T8333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.273266][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.340854][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.381112][ T8586] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 153.414176][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.421349][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.478051][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.485200][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.575015][ T8596] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 153.693538][ T8588] ------------[ cut here ]------------ [ 153.699593][ T8588] refcount_t: decrement hit 0; leaking memory. [ 153.724990][ T8588] WARNING: CPU: 0 PID: 8588 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 153.734471][ T8588] Modules linked in: [ 153.738498][ T8588] CPU: 0 PID: 8588 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 153.749659][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 153.760438][ T8588] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 153.766689][ T8588] Code: b2 00 00 00 e8 27 15 e7 fc 5b 5d c3 cc cc cc cc e8 1b 15 e7 fc c6 05 ba b5 e8 0a 01 90 48 c7 c7 a0 90 1f 8c e8 97 45 a9 fc 90 <0f> 0b 90 90 eb d9 e8 fb 14 e7 fc c6 05 97 b5 e8 0a 01 90 48 c7 c7 [ 153.786541][ T8588] RSP: 0018:ffffc900136afc48 EFLAGS: 00010246 2024/05/31 02:00:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 153.792624][ T8588] RAX: 315d73f9300d0800 RBX: ffff88807e51c664 RCX: ffff888011550000 [ 153.800849][ T8588] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.808891][ T8588] RBP: 0000000000000004 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 153.817254][ T8588] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: ffff88807e51c620 [ 153.825244][ T8588] R13: 0000000000000000 R14: ffff88807e51c664 R15: dffffc0000000000 [ 153.833579][ T8588] FS: 000055558062d480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 153.842966][ T8588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.850737][ T8588] CR2: 00007f1fc1baae70 CR3: 000000002588c000 CR4: 00000000003506f0 [ 153.859752][ T8588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.867859][ T8588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.876039][ T8588] Call Trace: [ 153.879335][ T8588] [ 153.882281][ T8588] ? __warn+0x163/0x4e0 [ 153.886536][ T8588] ? refcount_warn_saturate+0xfa/0x1d0 [ 153.892018][ T8588] ? report_bug+0x2b3/0x500 [ 153.896644][ T8588] ? refcount_warn_saturate+0xfa/0x1d0 [ 153.902134][ T8588] ? handle_bug+0x3e/0x70 [ 153.906546][ T8588] ? exc_invalid_op+0x1a/0x50 [ 153.911246][ T8588] ? asm_exc_invalid_op+0x1a/0x20 [ 153.916391][ T8588] ? __warn_printk+0x292/0x360 [ 153.921192][ T8588] ? refcount_warn_saturate+0xfa/0x1d0 [ 153.926748][ T8588] ? refcount_warn_saturate+0xf9/0x1d0 [ 153.932231][ T8588] ref_tracker_free+0x6af/0x7e0 [ 153.937372][ T8588] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 153.943290][ T8588] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.949842][ T8588] ? ax25_destroy_socket+0x549/0x5b0 [ 153.955158][ T8588] ax25_release+0x368/0x950 [ 153.960555][ T8588] sock_close+0xbc/0x240 [ 153.964824][ T8588] ? __pfx_sock_close+0x10/0x10 [ 153.969789][ T8588] __fput+0x406/0x8b0 [ 153.973808][ T8588] __x64_sys_close+0x7f/0x110 [ 153.978613][ T8588] do_syscall_64+0xf3/0x230 [ 153.983164][ T8588] ? clear_bhb_loop+0x35/0x90 [ 153.987988][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.993896][ T8588] RIP: 0033:0x7fd0c0c7bdda [ 153.998413][ T8588] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 154.018233][ T8588] RSP: 002b:00007ffee444f4e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 154.026720][ T8588] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd0c0c7bdda [ 154.034707][ T8588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 154.043107][ T8588] RBP: 00007fd0c0db59a0 R08: 0000001b33520000 R09: 7fffffffffffffff [ 154.052680][ T8588] R10: 000000000000004d R11: 0000000000000293 R12: 0000000000025a74 [ 154.061462][ T8588] R13: 00007fd0c0db407c R14: 0000000000000032 R15: 00007fd0c0db59a0 [ 154.069535][ T8588] [ 154.072564][ T8588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.079842][ T8588] CPU: 0 PID: 8588 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 154.089813][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 154.099856][ T8588] Call Trace: [ 154.103125][ T8588] [ 154.106048][ T8588] dump_stack_lvl+0x241/0x360 [ 154.110808][ T8588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.115995][ T8588] ? __pfx__printk+0x10/0x10 [ 154.120588][ T8588] ? vscnprintf+0x5d/0x90 [ 154.124909][ T8588] panic+0x349/0x860 [ 154.128807][ T8588] ? __warn+0x172/0x4e0 [ 154.132961][ T8588] ? __pfx_panic+0x10/0x10 [ 154.137384][ T8588] __warn+0x346/0x4e0 [ 154.141361][ T8588] ? refcount_warn_saturate+0xfa/0x1d0 [ 154.146815][ T8588] report_bug+0x2b3/0x500 [ 154.151140][ T8588] ? refcount_warn_saturate+0xfa/0x1d0 [ 154.156596][ T8588] handle_bug+0x3e/0x70 [ 154.160743][ T8588] exc_invalid_op+0x1a/0x50 [ 154.165250][ T8588] asm_exc_invalid_op+0x1a/0x20 [ 154.170090][ T8588] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 154.176151][ T8588] Code: b2 00 00 00 e8 27 15 e7 fc 5b 5d c3 cc cc cc cc e8 1b 15 e7 fc c6 05 ba b5 e8 0a 01 90 48 c7 c7 a0 90 1f 8c e8 97 45 a9 fc 90 <0f> 0b 90 90 eb d9 e8 fb 14 e7 fc c6 05 97 b5 e8 0a 01 90 48 c7 c7 [ 154.195745][ T8588] RSP: 0018:ffffc900136afc48 EFLAGS: 00010246 [ 154.201806][ T8588] RAX: 315d73f9300d0800 RBX: ffff88807e51c664 RCX: ffff888011550000 [ 154.209766][ T8588] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 154.217725][ T8588] RBP: 0000000000000004 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 154.225691][ T8588] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: ffff88807e51c620 [ 154.233662][ T8588] R13: 0000000000000000 R14: ffff88807e51c664 R15: dffffc0000000000 [ 154.241642][ T8588] ? __warn_printk+0x292/0x360 [ 154.246410][ T8588] ? refcount_warn_saturate+0xf9/0x1d0 [ 154.251859][ T8588] ref_tracker_free+0x6af/0x7e0 [ 154.256701][ T8588] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 154.262586][ T8588] ? __pfx_ref_tracker_free+0x10/0x10 [ 154.267960][ T8588] ? ax25_destroy_socket+0x549/0x5b0 [ 154.273238][ T8588] ax25_release+0x368/0x950 [ 154.277740][ T8588] sock_close+0xbc/0x240 [ 154.281974][ T8588] ? __pfx_sock_close+0x10/0x10 [ 154.286815][ T8588] __fput+0x406/0x8b0 [ 154.290794][ T8588] __x64_sys_close+0x7f/0x110 [ 154.295463][ T8588] do_syscall_64+0xf3/0x230 [ 154.299953][ T8588] ? clear_bhb_loop+0x35/0x90 [ 154.304795][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.310679][ T8588] RIP: 0033:0x7fd0c0c7bdda [ 154.315082][ T8588] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 154.334677][ T8588] RSP: 002b:00007ffee444f4e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 154.343080][ T8588] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd0c0c7bdda [ 154.351039][ T8588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 154.359001][ T8588] RBP: 00007fd0c0db59a0 R08: 0000001b33520000 R09: 7fffffffffffffff [ 154.366964][ T8588] R10: 000000000000004d R11: 0000000000000293 R12: 0000000000025a74 [ 154.374921][ T8588] R13: 00007fd0c0db407c R14: 0000000000000032 R15: 00007fd0c0db59a0 [ 154.382896][ T8588] [ 154.386162][ T8588] Kernel Offset: disabled [ 154.390515][ T8588] Rebooting in 86400 seconds..